Buffer Overflow Vulnerability in GRUB's UDF Filesystem Module by Red Hat

CVE-2025-0689

What is CVE-2025-0689?

The GRUB UDF filesystem module contains a vulnerability that allows a crafted filesystem image to exploit the way it allocates internal buffers based on user-controlled data length metadata. During the reading of data from disk, the module incorrectly assumes that the read size from the disk will always be smaller than the allocated buffer size. This oversight can lead to a heap-based buffer overflow, resulting in potential data corruption and enabling the execution of arbitrary code, potentially bypassing secure boot mechanisms.

References